Legal

Privacy Policy

Last updated: April 2026

GSA Africa (“GSA,” “we,” “us,” or “our”) is committed to protecting the privacy of our clients, website visitors, and users of our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.gsaafrica.com or engage our professional services.

1. Information We Collect

Personal Information

We may collect personally identifiable information that you voluntarily provide to us, including but not limited to:

  • Full name and job title
  • Email address and phone number
  • Company name and business address
  • Financial and accounting records provided during engagements
  • Tax identification numbers and registration details
  • Any other information you choose to provide via our contact forms or during consultations

Automatically Collected Information

When you access our website, we may automatically collect certain information about your device and usage, including:

  • IP address and browser type
  • Operating system and device information
  • Pages visited, time spent, and navigation patterns
  • Referring website and search terms
  • Cookies and similar tracking technologies

2. How We Use Your Information

We use collected information for the following purposes:

  • Service delivery: To provide accounting, tax advisory, audit, and business consulting services
  • Communication: To respond to your inquiries, send service updates, and provide relevant information
  • Compliance: To comply with legal obligations, including those set by the Tanzania Revenue Authority (TRA), Kenya Revenue Authority (KRA), and other regulatory bodies
  • Improvement: To improve our website, services, and client experience
  • Marketing: To send promotional communications with your consent, which you may opt out of at any time

3. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

  • Regulatory compliance: When required by law or regulatory authorities such as the TRA, KRA, NBAA, or ICPAK
  • Professional obligations: With other professionals involved in your engagement (e.g., legal counsel) with your consent
  • Service providers: With trusted third-party service providers who assist in our operations, subject to strict confidentiality agreements
  • Legal proceedings: When necessary to protect our rights, comply with legal processes, or respond to lawful requests

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission, secure cloud storage systems, access controls, and regular security assessments. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, accounting, and regulatory requirements. Financial and tax records may be retained for a minimum period as required by applicable laws in Tanzania and Kenya.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access to the personal data we hold about you
  • Correction of inaccurate or incomplete data
  • Deletion of your personal data, subject to legal retention requirements
  • Objection to the processing of your data for marketing purposes
  • Data portability in a commonly used format

To exercise these rights, please contact us at info@gsaafrica.com.

7. Cookies

Our website may use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small data files stored on your device. You can control cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain features on our website.

8. Third-Party Links

Our website may contain links to third-party websites, including regulatory bodies and partner organizations. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

9. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website with a revised “Last updated” date. We encourage you to review this page periodically.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: